Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditor (Healthcare/Gov)

Active

Federal

Response Deadline09/08/2026, 02:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Health And Human Services → CDC Office Of Acquisition ServicesView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

GA, 30341, USA

Set-Aside

SBA

Documents

This scope was carved out of 75D301-26-Q-00146.

The full solicitation package (6 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Modernized VAERS Reporting Application

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 3

subcontract

Response DeadlineSep 8

Submission deadline

Response Deadline

09/08/2026, 02:00:00 PM UTCin 4 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → CDC Office Of Acquisition Services

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Health And Human Services → CDC Office Of Acquisition Services

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security and privacy auditing for prime contractors on CDC VAERS modernization projects. Validates systems against HIPAA, Privacy Act, FISMA, and FedRAMP requirements. Reviews Azure environment security configurations and supports the issuance of an Authority to Operate (ATO). Uses security scanning tools and FedRAMP templates to ensure regulatory compliance. Delivers security assessment reports, compliance documentation, and ATO support packages.

Similar Contracts

Same NAICS industry code

Audio-Visual Systems Supply and Integration

Attorney General

POSTED

about 23 hours ago

DEADLINE

in about 2 hours

CJIS Security ComplianceThis subcontract opportunity, titled CJIS Security Compliance, is for providing specialized work involving Criminal Justice Information Services data for prime contractors on projects associated with the DNR Division of Forestry. The primary objective is to ensure that all personnel adhere to the FBI CJIS Security Addendum and maintain strict compliance with Title 28, Code of Federal Regulations, Part 20 and CJIS Security Policy requirements. The selected provider must utilize CJIS-compliant data handling environments and is responsible for the delivery of completed and submitted CJIS Certification pages for all involved staff. This opportunity falls under NAICS code 541519 and has a response deadline of September 25, 2026.

Dnr-division Of Forestry

POSTED

DEADLINE

Cybersecurity Framework Implementation and ManagementThe Cybersecurity Framework Implementation and Management subcontract, posted on September 3, 2026, focuses on the design, implementation, and management of comprehensive information security programs for prime contractors working on projects for the DNR Division of Forestry. The selected provider will be responsible for aligning security programs with various industry standards, including NIST SP 800-53, NIST 800-171, NIST CSF, ISO 27001, CIS, HiTRUST, CMMC, PCI-DSS, and the CSA Cloud Controls Matrix. The scope of work involves developing security policies and procedures through the use of auditing and monitoring tools to ensure a fully documented and operational information security program. This opportunity falls under NAICS code 541519, and interested parties must submit their responses by the deadline of September 25, 2026.

Dnr-division Of Forestry

POSTED

DEADLINE

Cybersecurity Compliance & ATO Support

Navajo Area Indian Health Svc

POSTED

DEADLINE

CCTV System Maintenance Services

FA2517 21 Cons Bldg 350

POSTED

DEADLINE

Pantheon Technical Support and Maintenance Services

Office Of The Assistant Secretary For Administration (asa)

POSTED

DEADLINE

Small Business End-Item Manufacturer

Network Contract Office 19 (36C259)

POSTED

DEADLINE

Fiber Optic Testing and Certification Services

FA4803 20 Cons Lgca

POSTED

DEADLINE

Patient Flow and Queue Management System - Crownpoint Healthcare Facility

Solicitation # 75H7126Q00216

The Indian Health Service Navajo Area is seeking a commercially available Patient Flow and Queue Management System for the Crownpoint Healthcare Facility Pharmacy Department. The requirement specifies the ACF Technologies Q-Flow brand or an equivalent solution that provides a fully operational system including software, licensing, hardware, installation, and ongoing technical support. Key functionalities must include virtual queuing, patient check-in, appointment management, digital signage, and administrative reporting, all operating as a standalone application within the facility network while adhering to strict cybersecurity and performance standards. This acquisition is designated as a Total Small Business Set-Aside under NAICS code 541519. The contract structure consists of a 12-month base period followed by four one-year option periods. Interested parties must submit quotations by September 8, 2026, ensuring that any proposed equal products meet all salient characteristics identified in the solicitation.

Navajo Area Indian Health Svc

POSTED

DEADLINE

Shaw OS2 High Speed Fiber Optic Cable

Solicitation # FA480326Q0112

Solicitation FA480326Q0112 is a total small business set-aside for the Department of Defense to engineer, furnish, install, and test a 48 strand, single mode fiber optic cable infrastructure upgrade at Shaw Air Force Base, South Carolina. The project involves installing water-blocked outside plant cable and 3-inch Geotextile Fabric Inner-duct within existing 4-inch conduits to connect building 01109 to buildings 00216, 00710, 01129, and 01601. The contract is a firm fixed price agreement under NAICS 541519, with a performance delivery date of January 13, 2027. The contractor must adhere to strict technical standards, including RUS 7 CFR 1755.900 for cable criteria, RUS Bulletin 1735F-401 for core alignment fusion splicing, and TIA 526-7A for optical power loss measurement. Required deliverables include bi-directional OTDR and Optical Power Meter testing at 1310 nm and 1550 nm, a final installation test report due within 10 business days of government witness testing, and a final project walk-through five days prior to acceptance. All installations must be labeled according to TIA-606-C, and sensitive network infrastructure documentation must be marked as Controlled Unclassified Information. Project management requires the contractor to chair weekly Integrated Process Team meetings and submit weekly status reports. Personnel must comply with Wage Determination No. 2015-4439 for Sumter County and follow AFMAN 91-203 for confined space safety. Access to Shaw AFB requires the submission of Base Access Request Forms for criminal background checks, and any work in secure areas requires government escorts and five days' advance coordination. Final acceptance is managed by the Government Project Manager.

FA4803 20 Cons Lgca

POSTED

DEADLINE

Sources Sought: Social Media Monitoring

Solicitation # PCA-NICHD-09419_Sources

The Division of Population Health Research within the National Institutes of Health is issuing a Sources Sought notice to identify qualified vendors capable of providing automated, large-scale social media data collection and management services. The objective is to acquire public data from platforms such as Instagram, Facebook, and X to support research on food, nutrition, eating behaviors, and public sentiment. The required solution must be scalable, allowing for the extraction of millions of text, image, and video records to support advanced AI, machine learning, and Large Language Model workflows. Key technical requirements include automated scheduling for longitudinal monitoring, structured data exports in formats like JSON or CSV, and robust data quality controls such as deduplication and validation. Interested parties must provide their organization's UEI, business size, a detailed capabilities statement, and a rough order of magnitude for 12 months of services. This notice is intended for market research to determine the method of acquisition and does not constitute a formal solicitation or a commitment to award a contract.

National Institutes Of Health Olao

POSTED

DEADLINE

VANCHCS Customizable Communication Platform Digital Signage

Solicitation # 36C26126Q1125

The Department of Veterans Affairs Network Contracting Office 21 is soliciting quotations for a customizable communication platform, specifically PatientPoint or an equivalent digital signage solution, for the VA Northern California Healthcare System. This opportunity, identified by solicitation number 36C26126Q1125, is designated as a set-aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 541519. The project will be performed in Mather, California. Following the initial solicitation, amendment 0001 extended the quotation submission deadline to September 4, 2026, at 11:00 AM PDT to provide sufficient time for the agency to post answers to vendor inquiries. Amendment 0002 was subsequently issued to provide those specific answers to potential bidders. All responses must be submitted electronically to Contract Specialist Victoria Torres.

261-NETWORK Contract Office 21 (36C261)

POSTED

DEADLINE

in about 1 hour

More opportunities from Department Of Health And Human Services → CDC Office Of Acquisition Services

Same awarding agency

AI/ML Implementation Specialist

Custom Computer Programming Services

POSTED

DEADLINE

UI/UX Design & Accessibility Consulting

Graphic Design Services

POSTED

DEADLINE

Full-Stack Web Application Development

Custom Computer Programming Services

POSTED

DEADLINE

Healthcare Informatics & Data Integration Specialist

Custom Computer Programming Services

POSTED

DEADLINE

IT Hardware Supplier (Computers & Servers)

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Structured Cabling Contractor

Electrical Contractors and Other Wiring Installation Contractors

POSTED

DEADLINE

Security System Integrator (Installation & Commissioning)

Security Systems Services (except Locksmiths)

POSTED

DEADLINE

Electronic Smart Key Box Hardware Supplier

Electrical Apparatus and Equipment, Wiring Supplies, and Related Equipment Merchant Wholesalers

POSTED

DEADLINE

Electronic Key Box System

Solicitation # 75D301-26-R-73515

This contract, solicitation number 75D301-26-R-73515, is issued by the CDC Office of Acquisition Services for the procurement, installation, and commissioning of a modern electronic smart key box system. The project aims to replace outdated and unreliable equipment to enhance the security and accountability of physical brass keys used by the Security Services Office and Security Operations Center. The new enterprise-class platform will support PIV credentials, multi-factor authentication, and real-time visibility into key access events to reduce risks associated with unauthorized access or lost keys. The system will be deployed across multiple locations in Georgia, including the Roybal Campus (Buildings 20, 17, 18, and 23), the Chamblee Campus (Building 106), and the Lawrenceville Campus, with capacities ranging from 20 to 80 keys per site. This total small business set-aside effort falls under NAICS code 561621 and is designed to integrate seamlessly with CDC networks and SOC consoles to ensure operational continuity and mission readiness.

Security Systems Services (except Locksmiths)

POSTED

DEADLINE

(Presolicitation Notice) Intent to Sole Source - Biol Specimens for Lenacapavir PEP

Solicitation # PR97866

The Centers for Disease Control and Prevention intends to award a sole source firm fixed price purchase order to Emory University for the procurement and delivery of biological specimens from individuals receiving weekly oral lenacapavir. This selection is based on Emory's established HIV clinical research infrastructure, documented experience with CDC-supported studies, and expertise in the collection, processing, and transfer of biological specimens. Additionally, Emory's location in the Atlanta area is cited as a critical factor to ensure the timely transport of specimens to the CDC DHP Laboratory Branch while minimizing risks to specimen integrity. This presolicitation notice, identified by solicitation number PR97866, is issued under the authority of FAR 12.201-1 and 41 U.S.C. 3304(a)(1). While the government intends to negotiate with Emory University as the sole source, it will consider other quotations or responses received by September 17, 2026, to determine if a competitive procurement is necessary. The contract falls under NAICS code 621511 and is managed by the CDC Office of Acquisition Services.

Medical Laboratories

POSTED

DEADLINE

Lab Humidification System Pilot Project - 75D301-26-Q-79242

Solicitation # 99987

Solicitation number 75D301-26-Q-79242 is a request for quotation for the purchase and delivery of two complete direct-space humidification systems for CDC laboratory spaces. This acquisition is a total set-aside for small business concerns and utilizes Smart Fog equipment as the basis of design, though technically acceptable equal products will be considered. The scope of work includes all necessary materials and components for the systems, but specifically excludes installation, air compressors, control wiring, and utility connections. The government will award a firm-fixed-price purchase order based on a best-value tradeoff, where technical capability is weighted more heavily than price. Delivery must be completed within 10 business days after the award at the CDC Distribution Center in Chamblee, Georgia. All quotations and related communications must be submitted to the contract specialist by September 11, 2026, at 11:00 a.m. Eastern Time.

Small Electrical Appliance Manufacturing

POSTED

DEADLINE

Modernized VAERS Reporting Application

Solicitation # 75D301-26-Q-00146

Solicitation 75D301-26-Q-00146 is a 100 percent small business set-aside for the Centers for Disease Control and Prevention to develop a modernized, mobile-friendly, and desktop-compatible web application for the Vaccine Adverse Event Reporting System. The project focuses on improving the user experience for consumers and healthcare providers through a redesigned landing page, guided reporting workflows with branching logic, intelligent validation, and reactive FAQ features. The solution will be hosted within the CDC-managed MS Azure environment and must include a low-code administrative interface for CDC personnel. The period of performance is scheduled from September 28, 2026, through June 27, 2027, with a primary remote place of performance within the United States. The contract is a firm-fixed-price acquisition awarded via a best value tradeoff process, where technical approach, management approach, and similar experience are significantly more important than price. Compliance requirements are stringent, mandating adherence to HIPAA, FedRAMP, Section 508 accessibility standards, and NIST security guidelines for Controlled Unclassified Information. Additionally, contractors must provide an Artificial Intelligence Use Compliance and Risk Management Plan to ensure ethical AI integration and prevent unlawful discrimination. Proposals are submitted in two volumes, with a 15-page limit on the technical proposal, and the final deadline for offers is September 8, 2026.

Custom Computer Programming Services

POSTED

DEADLINE